What is your serialization set for the copygroup?  We discovered that
with static serialization, the adsm client will try to obtain an
exclusive read-lock on a file before backing it up.  If it fails to
obtain the lock, it will return an "Access denied..." message.  This
confused us for a while and we asked IBM to change the message text for
that error since it leads you to believe you have a permissions problem.

David Hendrix
dmhendri AT fedex DOT com